admin_result

What admin_result does on Mcp Control Plane

AI agents call admin_result to retrieve information from Mcp Control Plane without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why admin_result is rated Low

This is a Read operation—it retrieves a previously stored result tied to an admin action by request ID. The 'elevated admin action' context and sibling tools like 'admin_audit_log', 'admin_run', and 'admin_capabilities' suggest this accesses sensitive administrative data, warranting high severity. However, it does not execute code, delete data, or move money, so Read is the correct category.

From the tool's definition Tool name 'admin_result' and description 'Return a stored elevated admin action result by request id' indicates data retrieval. The word 'Return' and 'by request id' confirm it queries/retrieves data rather than creating, executing, or modifying state.

Risk signalsAdmin/system-level operation

The rule that runs admin_result safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mcp Control Plane, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For admin_result, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "admin_result": {}
  }
}

Questions about admin_result